Secure File Uploads: What Most Developers Get WrongFile upload features feel simple to build. A user picks a file, your server saves it, done. But upload endpoints are one of the most common ways attackers get a foothold in a web app. Here's how to loSep 11 · 3 min readcybersage.hashnode.dev
Cross-Site Scripting (XSS): The Vulnerability That Refuses to DieIf you've built a web app that renders any kind of user input (a comment, a username, a search query), you've stood next to XSS. It's one of the oldest vulnerabilities in the book, it's still in the OAug 22 · 5 min readcybersage.hashnode.dev
7 Security Mistakes Junior Developers Make (And How to Fix Them)Security is not exactly taught in the same way syntax and frameworks are. Most junior developers learn it the hard way: after a bug is reported, a client sends an angry email or a 3 a.m Slack message Aug 1 · 5 min readcybersage.hashnode.dev
AI Is Writing Your Code. Who's Auditing It for Security Holes?Something shifted in how software gets built. Quietly, quickly and without a lot of debate. Developers today (junior and senior alike) are using AI tools like GitHub Copilot, ChatGPT and Claude to wriJul 18 · 5 min readcybersage.hashnode.dev
We Built Apps That Track You. Here's What Developers Actually See. I've spent years building web and mobile applications. I've integrated dashboards, wired up session recorders, and dropped tracking pixels into codebases without a second thought. It is just part of tJun 6 · 5 min readcybersage.hashnode.dev
